Cybersecurity News

This article provides a Bash script that detects and cleans up "orphaned" TLS secrets in Kubernetes—secrets that remain after their corresponding cert-manager Certificate resources have been deleted. The script addresses…

The article presents the source code for a music track titled "siberspace," which appears to be created using a live coding or algorithmic music environment. The code sets a tempo, loads French speech samples from a "sha…

As of April 7, 2026, Discord has announced plans to crack down on automating quest completion, warning users that using such scripts will likely result in being flagged. The provided script automates quests by manipulati…

The article describes a reproduction of a Windows 95 login bypass hack, which uses the printer settings dialog to circumvent the network login screen. It explains that Windows 95 lacks file-level permissions due to its F…

The article provides a curated collection of notes, tools, and techniques for reverse engineering macOS binaries, covering topics such as C++ reversing, fat binaries, and VST plugins. It prominently features Binary Ninja…

The article announces the launch of a free API for Cloud Intel Atomic Indicators, which provides daily updated data on malicious IP addresses using Cloudflare infrastructure. The API returns a JSON list of observed malic…

The article announces the launch of AWSAttacks, a new GitHub repository dedicated to collecting and sharing threat intelligence for Amazon Web Services (AWS). It serves as a curated hub for Indicators of Compromise (IoCs…

This article provides a modern installation guide for Arch Linux using BTRFS on a UEFI system, aimed at helping new users set up a minimal installation. The guide covers steps from basic terminal installation through vid…

This article provides a technical guide for decompiling IL2CPP Unity games using Il2CppDumper and Ghidra for modding purposes. The process involves extracting metadata with Il2CppDumper, converting it for Ghidra compatib…

List of IP addresses and subnets associated with various online platforms, including Meta (Instagram, Facebook), Twitter, Telegram, Kino.pub, and YouTube. It categorizes these addresses into specific nodes and subnets fo…

The article provides a batch script titled "AnyDesk-Reset.cmd" designed to reset the remote desktop software AnyDesk. The script stops the AnyDesk service, deletes configuration files from the system and user directories…

A command injection vulnerability in GPT-4 discovered by Nicholas Carlini, where the model's use of the `<|endoftext|>` token can cause it to abruptly end a response and begin generating unrelated content. This occurs be…

FriendlyIR is a new Slack application designed to help cybersecurity professionals stay updated on the latest news, blog posts, and social media updates by monitoring multiple sources in real-time. Currently awaiting Sla…

This article provides a guide for security professionals to identify leaked API keys and secrets on GitHub by using specific search syntax. It lists search patterns for various services, including OpenAI, GitHub OAuth, S…

Legally Blocked is a new, community-driven platform that provides comprehensive information about websites, apps, and online services blocked by governments worldwide. Built entirely on Cloudflare's serverless edge netwo…

This article is a curated list of cybersecurity tools and resources, organized by categories such as privilege escalation, credential harvesting, and exploitation frameworks. The repository, created by the author to mana…

The article explains that Microsoft Authenticator uses a proprietary scheme called phonefactor for Office 365 TOTP 2FA, preventing the use of standard TOTP apps. However, after registration, the app generates codes using…

A method known as the "DAN" (Do Anything Now) jailbreak prompt, which instructs ChatGPT to bypass its standard content restrictions by role-playing as an unrestricted AI. It provides a detailed prompt that forces the mod…

The article provides a curated list of cybersecurity search engines and tools for researchers, including platforms like Dehashed for viewing leaked credentials, Shodan for discovering internet-connected devices, and Expl…

The article provides instructions for installing Metasploit Framework on an M1 MacBook Air using the official macOS installer, including steps to bypass security blocks in System Preferences. After installation, it guide…